[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fG_qqNSgX2aMC1a7KnTNfkRsJsT6UUBF1FNh07viu1Rg":3,"g5a-risk:CVE-2024-23656":135},{"success":4,"data":5,"meta":132},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":36,"epssPercentile":26,"epssTimeSeries":37,"severity":38,"affectedProducts":39,"affectedProductsCount":45,"references":46,"referencesCount":77,"weaknesses":78,"weaknessesCount":94,"isActivelyExploited":95,"cisaInfo":26,"otxData":26,"relatedBlogPosts":96,"seoMetadata":97,"configurations":122,"relatedVendorCves":130,"notableEvents":131},"CVE-2024-23656","What is CVE-2024-23656?","Dex is an identity service that uses OpenID Connect to drive authentication for other apps. Dex 2.37.0 serves HTTPS with insecure TLS 1.0 and TLS 1.1. `cmd\u002Fdex\u002Fserve.go` line 425 seemingly sets TLS 1.2 as minimum version, but the whole `tlsConfig` is ignored after `TLS cert reloader` was introduced in v2.37.0. Configured cipher suites are not respected either. This issue is fixed in Dex 2.38.0.","Dex is an identity service that uses OpenID Connect to drive authentication for other apps. Dex 2.37.0 serves HTTPS with insecure TLS 1.0 and TLS 1.1. `cmd\u002Fd...","2024-01-25T20:15:41.107","2026-06-17T07:13:19.22",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":33,"CVSSMetricV2":34,"CVSSMetricV40":35},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"security-advisories@github.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},[],[],[],0.00435,[36,36,36,36,36,36,36],"High",[40],{"vendor":41,"product":42,"version":43,"criteria":44,"vulnerable":4},"linuxfoundation","dex","2.37.0","cpe:2.3:a:linuxfoundation:dex:2.37.0:*:*:*:*:*:*:*",1,[47,52,56,60,63,67,69,71,73,75],{"url":48,"source":49,"tags":50},"https:\u002F\u002Fgithub.com\u002Fdexidp\u002Fdex\u002Fblob\u002F70d7a2c7c1bb2646b1a540e49616cbc39622fb83\u002Fcmd\u002Fdex\u002Fserve.go#L425","GitHub",[51],"Product",{"url":53,"source":49,"tags":54},"https:\u002F\u002Fgithub.com\u002Fdexidp\u002Fdex\u002Fcommit\u002F5bbdb4420254ba73b9c4df4775fe7bdacf233b17",[55],"Patch",{"url":57,"source":49,"tags":58},"https:\u002F\u002Fgithub.com\u002Fdexidp\u002Fdex\u002Fissues\u002F2848",[59],"Issue Tracking",{"url":61,"source":49,"tags":62},"https:\u002F\u002Fgithub.com\u002Fdexidp\u002Fdex\u002Fpull\u002F2964",[59,55],{"url":64,"source":49,"tags":65},"https:\u002F\u002Fgithub.com\u002Fdexidp\u002Fdex\u002Fsecurity\u002Fadvisories\u002FGHSA-gr79-9v6v-gc9r",[66],"Exploit",{"url":48,"source":49,"tags":68},[51],{"url":53,"source":49,"tags":70},[55],{"url":57,"source":49,"tags":72},[59],{"url":61,"source":49,"tags":74},[59,55],{"url":64,"source":49,"tags":76},[66],10,[79,87],{"id":80,"name":81,"description":82,"extendedDescription":83,"status":84,"abstraction":85,"structure":86},"CWE-757","Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')","A protocol or its implementation supports interaction between multiple actors and allows those actors to negotiate which algorithm should be used as a protection mechanism such as encryption or authentication, but it does not select the strongest algorithm that is available to both parties.","When a security mechanism can be forced to downgrade to use a less secure algorithm, this can make it easier for attackers to compromise the product by exploiting weaker algorithm. The victim might not be aware that the less secure algorithm is being used. For example, if an attacker can force a communications channel to use cleartext instead of strongly-encrypted data, then the attacker could read the channel by sniffing, instead of going through extra effort of trying to decrypt the data using brute force techniques.","Incomplete","Base","Simple",{"id":88,"name":89,"description":90,"extendedDescription":91,"status":92,"abstraction":93,"structure":86},"CWE-326","Inadequate Encryption Strength","The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.","A weak encryption scheme can be subjected to brute force attacks that have a reasonable chance of succeeding using current attack methods and resources.","Draft","Class",2,false,[],{"title":98,"metaDescription":99,"keywords":100,"canonicalUrl":101,"structuredData":102},"What is CVE-2024-23656? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2024-23656, a high severity cyber security vulnerability from 2024. Dex is an identity service that uses OpenID Connect to driv...","CVE-2024-23656, CVE-2024-23656 vulnerability, CVE-2024-23656 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, linuxfoundation security, dex vulnerability","\u002Fwhat-is\u002Fcve-2024-23656",{"@context":103,"@type":104,"headline":98,"description":99,"datePublished":10,"dateModified":11,"author":105,"publisher":109,"about":113,"mainEntityOfPage":117,"articleSection":120,"keywords":121},"https:\u002F\u002Fschema.org","TechArticle",{"@type":106,"name":107,"url":108},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":106,"name":107,"url":108,"logo":110},{"@type":111,"url":112},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":114,"name":6,"description":115,"additionalType":116},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":118,"@id":119},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2024-23656","Cybersecurity","CVE-2024-23656, CVE-2024-23656 vulnerability, CVE-2024-23656 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[123],{"Operator":26,"Negate":26,"Nodes":124},[125],{"Operator":126,"Negate":95,"CPEMatch":127},"OR",[128],{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":129,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"CFFADC7B-A8BE-437B-B1A8-868ECD4ED5E9",[],[],{"lastModified":11,"cacheTime":133,"version":134},1792437194393,"2.0",{"score":136,"band":137,"action":138,"scoredAt":139},48,"Medium","Plan remediation","2026-10-16T07:00:36.088006+00:00"]